This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32342d3234203d3e20323731383832.roa
File: 3137302e3234342e3230382e302f32342d3234203d3e20323731383832.roa (raw, json)
Hash identifier: zdAvATBlONXSyPO3fSZiZA/3ZSEseiY0fJaxc36QJ6k=
Subject key identifier: D7:C4:C3:0F:AC:F9:33:76:A3:36:5F:2D:98:8D:68:32:1C:97:61:F2
Certificate issuer: /CN=089B798E1BD051786195E5F9D02238D550A5EAD7
Certificate serial: 28A325EE29A6E490F97F073450DEE4C062E7249F
Authority key identifier: 08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32342d3234203d3e20323731383832.roa
Signing time: Tue 06 Jan 2026 19:26:52 +0000
ROA not before: Tue 06 Jan 2026 19:21:52 +0000
ROA not after: Tue 05 Jan 2027 19:26:52 +0000
asID: 271882
IP address blocks: 170.244.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl
rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 23:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a3:25:ee:29:a6:e4:90:f9:7f:07:34:50:de:e4:c0:62:e7:24:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089B798E1BD051786195E5F9D02238D550A5EAD7
Validity
Not Before: Jan 6 19:21:52 2026 GMT
Not After : Jan 5 19:26:52 2027 GMT
Subject: CN=D7C4C30FACF93376A3365F2D988D68321C9761F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:60:b4:be:f8:b0:ce:b4:a6:02:9a:94:53:
6c:13:e3:40:10:93:b3:ca:4d:69:c3:6e:50:63:2f:
65:48:63:0e:54:fa:15:19:8f:b3:6a:04:15:60:c4:
7a:1e:f0:84:96:33:1c:ce:cd:93:8b:18:c8:c8:ca:
50:bd:f9:4d:fc:54:66:c9:d4:d9:2b:c2:e7:bf:a2:
59:d6:c0:19:ee:46:da:15:7e:34:3c:77:36:36:b7:
4a:fe:a4:84:41:01:86:73:e5:fb:40:ee:67:1b:af:
f6:d7:7c:53:85:2e:aa:81:9b:49:01:06:ad:cb:d4:
65:64:cc:0f:05:0f:f5:d2:b6:f0:8a:5e:fb:8f:97:
0e:1e:03:eb:6e:93:57:9e:68:ac:68:ba:3c:aa:16:
20:4a:d1:96:70:1a:a4:fb:00:7f:48:63:b4:9f:7d:
63:ac:87:1d:e7:91:3c:0a:64:8c:3a:80:c2:9c:58:
e7:01:42:c6:bf:3d:07:18:c3:bd:86:61:66:77:76:
9e:96:a4:75:41:7b:6e:33:c7:d5:79:1d:22:ed:ad:
99:16:4b:f8:b3:cb:5c:de:23:3b:c3:56:97:b0:0c:
c4:53:24:85:da:49:1e:67:57:5c:ed:c6:66:93:76:
12:77:50:ad:36:3f:01:da:36:13:92:88:d7:8f:bc:
90:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C4:C3:0F:AC:F9:33:76:A3:36:5F:2D:98:8D:68:32:1C:97:61:F2
X509v3 Authority Key Identifier:
keyid:08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32342d3234203d3e20323731383832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.244.208.0/24
Signature Algorithm: sha256WithRSAEncryption
91:09:9a:8f:cd:72:af:1f:89:f9:ec:bd:08:ce:fc:44:48:56:
a6:3b:d2:01:d7:98:7a:68:24:60:5a:e4:d7:62:ba:00:eb:57:
b4:d6:c8:b3:c5:f5:21:fc:7d:47:b6:a5:f2:37:9a:02:c9:f4:
fd:3d:34:a7:2e:c5:d5:cd:dd:0f:ba:97:d0:0e:d3:a7:70:48:
03:f4:26:8f:d3:d3:53:7e:51:5f:b4:5a:62:d2:95:df:01:b8:
a7:f9:2f:81:29:f6:31:88:24:83:f7:71:bd:55:9f:98:2e:d9:
5e:8a:df:93:c6:34:54:78:35:df:3e:19:e5:3e:ca:9a:fd:90:
f9:d7:4f:41:af:3f:0e:e5:0f:ce:fb:f5:c0:51:13:12:cc:7f:
a1:d2:44:38:b9:43:0a:bc:e5:f4:9e:d7:61:81:b5:8a:c7:ee:
11:7b:10:05:4b:3d:cd:ec:d8:ad:4c:7a:4c:e6:e1:52:ad:08:
2d:e7:66:e1:ab:e1:ad:17:a5:e8:c5:9a:f6:ec:4e:5a:56:6a:
04:02:5f:1c:34:fd:f6:d9:e8:42:da:1e:03:38:74:8d:a4:b4:
8d:8b:99:3e:22:1c:e9:59:52:bf:66:7a:6b:63:14:1f:70:28:
5f:9c:36:e9:d2:74:94:b0:16:d4:2f:7a:6f:32:b0:78:06:72:
79:0c:ed:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:36:54 2026 by rpki-client